Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File:                     K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier:          sev26E+M9J3i327LfUkgmL+wj5boyesY7C3/sfvj7yY=
Subject key identifier:   BB:7E:BF:13:8C:BC:F1:C7:12:48:2B:ED:59:3F:51:EC:C7:65:62:9D
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer:       /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number:          0849
Signing time:             Fri 28 Mar 2025 21:01:16 +0000
Manifest this update:     Fri 28 Mar 2025 21:01:16 +0000
Manifest next update:     Fri 04 Apr 2025 21:01:16 +0000
Files and hashes:         1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: 7tdDFbHWM18QAG2cWjwgSMpEi6YtOQe/tEUpdhOVEZk=)
                          2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=)
                          3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=)
                          4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=)
                          5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=)
                          6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142241
        Validity
            Not Before: Mar 28 21:01:16 2025 GMT
            Not After : Apr  4 21:01:16 2025 GMT
        Subject: CN=67e70e1c-f79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:19:6d:7d:31:c9:74:12:66:c4:db:23:15:
                    f4:e4:24:5c:ed:18:c1:32:44:97:2e:74:b6:d0:67:
                    b5:f4:55:0a:fb:ad:5e:84:27:8e:9d:11:fd:f8:b6:
                    f0:6c:55:05:e0:85:59:12:e9:34:83:46:a8:d3:54:
                    8e:8d:36:12:3a:a4:2a:20:fb:9f:4d:03:eb:7d:96:
                    2c:8f:ce:59:c0:08:ab:5c:83:37:a2:63:9e:d3:af:
                    9e:06:50:20:1c:84:89:00:4b:f1:d6:65:fd:95:29:
                    9c:00:6b:38:fe:d2:0d:e8:fc:0f:71:ce:65:73:1a:
                    4b:e4:ed:79:b9:4f:e3:40:25:ef:5d:2d:34:f7:95:
                    67:c6:38:99:c5:c3:3f:ab:cf:8d:b3:5d:fd:5f:1b:
                    8b:fc:76:98:23:c9:fa:0e:df:09:ba:b9:0d:74:69:
                    a3:9b:9b:f1:6e:83:c9:71:8b:57:3b:0a:56:ce:df:
                    d6:d7:a0:f5:0b:d6:09:e8:aa:02:81:45:a9:10:53:
                    22:08:34:a9:47:79:4c:c4:64:c1:f5:63:58:a4:85:
                    aa:cc:2a:a1:60:71:33:30:c7:7e:ba:43:e5:c0:66:
                    b6:2d:e9:6e:f8:ca:7d:de:d2:66:a7:ce:04:d1:b5:
                    31:0e:2c:de:e8:f4:b7:cf:cc:57:7e:db:72:44:5a:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:BF:13:8C:BC:F1:C7:12:48:2B:ED:59:3F:51:EC:C7:65:62:9D
            X509v3 Authority Key Identifier:
                keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:6a:2e:4f:c3:95:46:65:0d:90:c5:e6:69:0f:db:69:0e:
         f9:7b:a8:22:46:d5:51:a3:cd:29:d8:18:11:a9:bb:33:49:50:
         2c:df:4a:68:66:d7:11:d4:ce:22:ba:5a:d4:2e:c5:03:8e:5f:
         6e:d3:08:5b:5e:de:ef:a5:22:0c:0d:e9:95:5f:f2:b7:80:5d:
         1e:29:6d:c1:1b:f5:02:3a:c0:f8:80:e6:b6:63:43:a3:d2:97:
         b4:fb:50:d2:e3:d5:a0:a6:1b:65:55:7e:02:39:63:10:c0:1a:
         1e:09:3b:53:a6:8d:18:87:90:c0:52:74:04:63:50:78:d0:b6:
         59:e1:d1:55:96:ba:98:ed:4d:cb:40:d1:fe:05:31:5d:db:fa:
         82:67:38:ab:38:7f:65:6d:3c:a1:06:c8:bc:da:f1:77:0b:46:
         8f:36:52:bc:77:ca:ad:35:83:02:52:c2:67:80:f0:98:bd:08:
         85:a9:87:86:51:74:73:6a:da:9a:64:8c:aa:94:9a:7b:6d:e1:
         1e:da:0f:69:66:81:03:97:46:0d:c9:99:d2:c7:10:4e:25:fb:
         23:04:92:c5:56:11:52:dc:fa:02:7f:d9:fd:75:d3:89:38:81:
         71:61:09:bd:0e:50:e2:c3:46:9a:52:eb:6d:80:ed:6a:7e:2b:
         54:d3:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:17 2025 by rpki-client